Analysis

  • max time kernel
    120s
  • max time network
    145s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231222-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
  • submitted
    31-12-2023 04:33

General

  • Target

    284dd1786b02b85e62ce7e96a110c2fb.exe

  • Size

    76KB

  • MD5

    284dd1786b02b85e62ce7e96a110c2fb

  • SHA1

    738beb511a21430a66c575f8590d5450c64d767b

  • SHA256

    79f2354476fbd8f9760efbd13632b5df5f59149a5da4f4fdb7bd26bdf3000e57

  • SHA512

    4a19a32fa413edce2fd9c61817d30bbd21b57b266e820103c1febd2faea2f1c89de5ffc504fa7727b430e0479414bde506072e52d62f0c3fe7b8157ec12da536

  • SSDEEP

    1536:E0xYZ9OrbpiSxqYjA3aN9XhS8UOfd7e3uiTrPAYTj67MREY5qXX8:E0iZ9OPtxqYi+yO07rPAkjKSLIXX8

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\284dd1786b02b85e62ce7e96a110c2fb.exe
    "C:\Users\Admin\AppData\Local\Temp\284dd1786b02b85e62ce7e96a110c2fb.exe"
    1⤵
      PID:912
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 912 -s 420
        2⤵
        • Program crash
        PID:4216
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 912 -s 420
        2⤵
        • Program crash
        PID:4276
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 912 -ip 912
      1⤵
        PID:672
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 488 -p 912 -ip 912
        1⤵
          PID:4928

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/912-1-0x0000000000400000-0x000000000042E000-memory.dmp

          Filesize

          184KB

        • memory/912-3-0x00000000006B0000-0x00000000006C1000-memory.dmp

          Filesize

          68KB

        • memory/912-4-0x0000000000400000-0x000000000042E000-memory.dmp

          Filesize

          184KB

        • memory/912-2-0x0000000000400000-0x000000000042E000-memory.dmp

          Filesize

          184KB

        • memory/912-0-0x0000000000400000-0x000000000042E000-memory.dmp

          Filesize

          184KB

        • memory/912-5-0x0000000000400000-0x000000000042E000-memory.dmp

          Filesize

          184KB